Every vulnerability is a 50/50 split.
No upfront coin.
After publishing, testing, accepting, and pay out then you'll get your cash.
I have over 350 recognize acknowledge vulnerabilities no time to triage.
No patience.
I have over 77% critical vulnerabilities.